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DETAILED ACTION 

1 . Claims 1-9 have been examined. 

Claim Objections 

2. Claim 1 is objected to because of the following informalities: the term "the 
detection" in line 2 of Claiml should be —a detection™. Appropriate correction is 
required. 

Claim 5 is objected to because of the following informalities: Claim 5 should not 
contain a period (.) in the middle of claim language. Appropriate correction is required. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

3. Claims 1-9 are rejected under 35 U.S.C. 102(b) as being anticipated by Chen et 
al (U.S. Patent 5,960,170) hereinafter Chen. 

As per Claim 1, Chen discloses a method to accomplish the collaborative 
suppression of undesirable activity on any node within a computing environment 
(network) through 
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(1) the detection of a compromise event (viruses) (col. 2, lines 60-65); 

(2) subsequent publication of a compromise event notification (Fig. 2 and col. 8, 
lines 15-25) and 

(3) resulting service provider node (proxy server 820) responding to any 
subsequent service request from a compromised node (client) (identified in the 
aforementioned compromise event notification) with one, or more, suppressive 
responses (Fig.8B, col. 24, lines 15-20 and col. 27, lines 20-35). 

As per Claim 2, Chen discloses the limitations of Claim 1 above. Chen further 
discloses wherein the method by which the identification of the potential for undesirable 
activity is accomplished by the detection of the occurrence of a compromise event and 
the subsequent publication of a compromise event notification (Fig. 2 and col. 8, lines 
15-25). 

As per Claim 3, Chen discloses the limitations of Claim 2 above. Chen further 
discloses wherein the specific nature of a compromise event is unrestricted and left to 
the specific implementation of a compromise detector (col. 12, lines 10-25). 

As per Claim 4, Chen discloses the limitations of Claim 2 above. Chen further 
discloses wherein the detection of a compromise event and publication of an associated 
compromise event notification are distributed capabilities, simultaneously 
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implementable on any (or even all) nodes of a computing environment (Fig. 7 and col. 
24, lines 15-20 and 50-60). 

As per Claim 5, Chen discloses the limitations of Claim 1 above. Chen further 
discloses wherein the collaborative suppression of undesirable activity is affected by the 
response, of service providing nodes, to service requests received from a node 
identified in a compromise event notification. This is referred to as the suppressive 
response (col. 27, lines 15-35). 

As per Claim 6, Chen discloses the limitations of Claim 5 above. Chen further 
discloses wherein the specific nature and count of suppressive responses of any 
particular node is unrestricted and left to the specific implementation of the service 
providing node (col. 23, lines 35-60). 

As per Claim 7, Chen discloses the limitations of Claim 6 above. Chen further 
discloses wherein the association of one or more suppressive responses, of a particular 
service providing node, to one or more compromise event notifications is unrestricted 
and left to the specific run-time configuration of the service providing node (col. 27, lines 
5-35). 

As per Claim 8, Chen discloses the limitations of Claim 5 above. Chen further 
discloses wherein the collaborative suppression of undesirable activity is affected by the 
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distributed execution of one or more suppressive responses by one or more service 
providing nodes (col. 23, lines 60-67 through col. 24, lines 1-20). 

As per Claim 9, Chen discloses the limitations of Claim 1 above. Chen further 
discloses wherein there is no restriction on the location, or co-location, of compromise 
detection and/or service provisioning to specific nodes, or on the same node; allowing 
for remote compromise detection and/or a single node performing compromise 
detection and service provisioning (col. 11, lines 1-50 and col. 25, lines 40-60). 

Conclusion 

4. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Kouznettsov (U.S. Patent 6,973,577 B1) discloses system and method for 
dynamically detecting computer virus through associative behavioral analysis of runtime 
sate. 

Conklin et al. (U.S. Patent 5,991,881) discloses network surveillance system. 

Cox et al. (U.S. Patent 6,842,861 B1) discloses method and system for detecting 
viruses on handheld computers. 
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Contact Information 



5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Bao Tran N. To whose telephone number is 571-272- 
8156. The examiner can normally be reached on Monday-Friday from 8:00 to 4:30. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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